Skip to content

Commit

Permalink
Browse files Browse the repository at this point in the history
Fix stored xss in profile page.
  • Loading branch information
Ahmad Gneady committed Jul 10, 2021
1 parent 1f1e45f commit 3cd1e1d
Show file tree
Hide file tree
Showing 3 changed files with 4 additions and 4 deletions.
2 changes: 1 addition & 1 deletion app/admin/pageServerStatus.php
@@ -1,6 +1,6 @@
<?php
$appgini_version = '6.0.1145';
$generated_ts = '10/7/2021 9:10:58 PM';
$generated_ts = '10/7/2021 9:21:28 PM';

$currDir = dirname(__FILE__);
require("{$currDir}/incCommon.php");
Expand Down
4 changes: 2 additions & 2 deletions app/membership_profile.php
Expand Up @@ -111,7 +111,7 @@
include_once("$currDir/header.php"); ?>

<div class="page-header">
<h1><?php echo sprintf($Translation['Hello user'], $mi['username']); ?></h1>
<h1><?php echo sprintf($Translation['Hello user'], htmlspecialchars($mi['username'])); ?></h1>
</div>
<div id="notify" class="alert alert-success" style="display: none;"></div>
<div id="loader" style="display: none;"><i class="glyphicon glyphicon-refresh"></i> <?php echo $Translation['Loading ...']; ?></div>
Expand Down Expand Up @@ -223,7 +223,7 @@
<div class="panel-body">
<div class="form-group">
<label><?php echo $Translation['group']; ?></label>
<div class="form-control-static"><?php echo $mi['group']; ?></div>
<div class="form-control-static"><?php echo htmlspecialchars($mi['group']); ?></div>
</div>
</div>
</div>
Expand Down
2 changes: 1 addition & 1 deletion orpm.axp

Large diffs are not rendered by default.

0 comments on commit 3cd1e1d

Please sign in to comment.